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COMMISSIONER FOR PATENTS 
Mail Stop AMENDMENT 
PO Box 1450 

Alexandria, VA 22313-1450 
SIR: 

Disclosure Statement under 37 C.F.R. 1 .56 and 1 .98 

Pursuant to 37 CFR § 1.56 and MPEP § 2001.06(c), the documents listed on the 
attached form PTO-1449 are disclosed. 

Pursuant to 37 CFR § 1 .98(a), the documents listed on the attached form PTO- 
1449 are submitted herewith. The Information Disclosure Statement submitted 
herewith is being filed within three months of the filing of a national application 
other than a continued prosecution application under 37 CFR 1.53(d); within 
three months of the date of entry of the national stage as set forth in 37 CFR 
1.491 in an international application; before the mailing of a first Office Action on 
the merits; or before the mailing of a first Office Action after the filing of a request 
for continued examination under 37 CFR 1.114. Although the Applicants believe 
that no fee is due in connection with this submission, the Commissioner is hereby 
authorized to charge counsel's Deposit Account No. 20-0782/SRI/3928-9 for any 
fees required to make this response timely and acceptable to the Office. 
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The documents listed on the attached form PTO-1449 comprise the responses to 
contention interrogatories made in the action captioned SRI International Inc. v. 
Internet Security Systems et al. currently pending in the U.S. District Court for the 
District of Delaware, case number 04-1199-SLR. The interrogatories relate to 
the defendants' allegations of inequitable conduct and to the validity of U.S. 
Patents 6,711,615, 6,484,203, 6,321,338, and 6,708,212, from at least one of 
which the present Application claims priority. 

The documents listed as C2 through C51 on the attached form PTO-1449 are the 
defendants' interrogatory responses and exhibits thereto. The documents listed 
as C52 through C55 are the plaintiffs (Applicants') responses, including a 
rebuttal of the defendants' allegations of invalidity. The remainder of the 
documents provided herewith represent the art referenced in the defendants' 
responses that is not already of record in the present Application. 

The final exhibit of each defendant's responses {i.e., documents C25 and C49) 
alleges that the combination of an exceptionally large number of documents 
renders the patents in suit obvious. In order to avoid overly burdening the 
Examiner with this large volume of additional material, the Applicants have not 
provided copies of these references unless they are referenced elsewhere in the 
exhibits, or already of record in the present Application. However, the Applicants' 
representative will be more than happy to provide any or all of these references if 
the Examiner believes it necessary. 

The Examiner's attention is directed to the fact that certain portions of the 
documents submitted herewith (particularly, certain portions of the defendant's 
invalidity contentions) are marked as subject to a protective order. The portions 
of the documents so marked include citations from an unpublished, internal and 
confidential document authored by the Applicants entitled "Conceptual Design 
and Planning for EMERALD: Event Monitoring Enabling Responses to 
Anomalous Live Disturbances 11 dated 20 May, 1997. This document has never 
been published or made available to the public, and as such cannot be prior art 
or otherwise material to patentability, and is not cited on the attached form PTO- 
1449. The Applicants do not object to the inclusion of the cited portions of this 
document, as recited in the defendant's invalidity contentions, in the official file 
wrapper maintained by the Office. 

Further, two documents referenced by the defendants in their contentions are 
marked as "For Official Use Only": (i) "Netranger Realtime Network Intrusion 
Detection Performance and Security Test, DoD/SPOCK including appendices A, 
B, and C, April 30 1997 and (ii) "Product Security Assessment of the Netranger 
Intrusion Detection Management System Version 1.1", Air Force Information 
Warfare Center, February 1997. The Applicants are investigating the validity of 
these government markings and are unable at present to provide the Examiner 
with copies thereof. If it is determined that these markings are no longer 
appropriate, the Applicants will provide copies to the Examiner. 
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Respectfully submitted, 

Kin-Wah Tong, Esq. 
Registration No. 39,400 
PATTERSON & SHERIDAN, LLP 
595 Shrewsbury Avenue, Suite 100 
Shrewsbury, NJ 07702 
Telephone: (732) 530-9404 
Facsimile: (732) 530-9808 
Attorney for Applicants 
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C1 


JOINT CLAIM CONSTRUCTION STATEMENT, SRI International, Inc., a California Corporation v. Internet 
Security Systems, Inc., a Delaware Corporation, Internet Security Systems, Inc., a Georgia Corporation, and 
Symantec Corporation a Delaware Corporation, (13 pages), Certificate of Service dated March 17, 2006 






C2 


SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI INTERNATIONAL, INC.'S 
INTERROGATORIES NOS. 6 AND 11, SRI International, Inc., a California Corporation v. Internet Security 
Systems, Inc., a Delaware Corporation, Internet Security Systems, Inc., a Georgia Corporation and Symantec 
Corporation, a Delaware Corporation, pp 1-22, Dated November 15, 2005 






C3 


EXHIBIT A-1 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 1 1 , EMERALD: EVENT MONITORING ENABLING 
RESPONSES TO ANOMALOUS LIVE DISTURBANCES, "EMERALD 1997", EMERALD 1997 INVALIDATES 

THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (b), pp. 1-51, November 15, 2005. 






C4 


EXHIBIT A-2 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, ANALYSIS AND RESPONSE FOR 
INTRUSION DETECTION IN LARGE NETWORKS- SUMMARY FOR CMAD WORKSHOP, "EMERALD-CM AD" , 

EMERALD -CMAD INVALIDATES THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (b) AND/OR 103, pp.1- 
33, November 15, 2005. 






C5 


EXHIBIT A-3 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, EMERALD: EVENT MONITORING ENABLING 
RESPONSES TO ANOMALOUS LIVE DISTURBANCES CONCEPTUAL OVERVIEW, "EMERALD- 
CONCEPTUAL OVERVIEW", EMERALD -CONCEPUTAL OVERVIEW INVALIDATES THE INDICATED 

CLAIMS UNDER 35 U.S.C. § 102 (b) AND/OR 103, pp. 1-34, November 15, 2005. 






C6 


EXHIBIT A-4 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 1 1 , CONCEPTUAL DESIGN AND PLANNING FOR 
EMERALD: EVENT MONITORING ENABLING RESPONSES TO LIVE DISTURBANCES, "EMERALD - 
CONCEPTUAL DESIGN 1997", EMERALD - CONCEPTUAL DESIGN 1997 INVALIDATES THE INDICATED 

CLAIMS UNDER 35 U.S.C. § 102 (b) AND/OR 103 pp.1-56, November 15, 2005. 






C7 


EXHIBIT A-5 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, LIVE TRAFFIC ANALYSIS OF TCP/IP 
GATEWAYS, "EMERALD - LIVE TRAFFIC ANALYSIS", EMERALD - LIVE TRAFFIC ANALYSIS INVALIDATES 

THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (b), pp.1-44, November 15, 2004. 






C8 


EXHIBIT A-6 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 1 1 , NEXT GENERATION INTRUSION 
DETECTION EXPERT SYSTEM (NIDES) A SUMMARY, "NETWORK NIDES", NETWORK NIDES INVALIDATES 

THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (b), pp. 1-40, November 15, 2005 






C9 


EXHIBIT A-7 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, SCALABLE INTRUSION DETECTION FOR 
THE EMERGING NETWORK, "JI-NAO*\ EACH OF JI-NAO AND JI-NAO SLIDES INVALIDATE THE INDICATED 

CLAIMS UNDER 5 U.S.C. § 102 (b), pp. 1-76, November 15, 2005. 
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C10 


EXHIBIT A-8 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11 , A NETWORK SECURITY MONITOR, "NSM W , 

NSM INVALIDATES THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (b), pp. 1-9, November 15, 2005. 






C11 


EXHIBIT A-9 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, DISTRIBUTED INTRUSION DETECTION 
SYSTEM, "DIDS FEBRUARY 1991 AND DIDS OCTOBER 1991", EACH OF DIDS FEBRUARY 1991 AND DIDS 

OCTOBER 1991 INVALIDATE THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (b), pp. 1-88, November 15, 
2005. 






C12 


EXHIBIT A-10 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11. GRAPH BASED INTRUSION DETECTION 
qYQTFfU! FOR I ARfiF MFTWDRK^ "fiRIH^ 1QQR AKin FiRID^ 1QQ7" fiRin^ 1QQfi AND PSRID^ 1QQ7 

INVALIDATE THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (b), pp. 1-39, November 15, 2005. 






C13 


EXHIBIT A-1 1 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, WHEELGROUP CORPORATION, 
"NETRANGER", EACH OF NETRANGER USER GUIDE 1.3.1 INVALIDATE THE INDICATED CLAIMS UNDER 

35 U.S.C. § 102 (b), pp. 1-34, November 15, 2005. 






C14 


EXHIBIT A-12 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, INTERNET SECURITY SYSTEMS, 

"REALSECURE", REALSECURE INVALIDATES THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (b), pp.1- 
22, November 15, 2005. 






C15 


EXHIBIT A-13 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, THE ARCHITECTURE OF A NETWORK 
LEVEL INTRUSION DETECTION SYSTEM, "NETWORK LEVEL INTRUSION DETECTION", NETWORK LEVEL 

INTRUSION DETECTION INVALIDATES THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (b), pp. 1-20, 
November 15, 200. 






C16 


EXHIBIT A-14 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, U.S. PATENT NO. 5,825,750 (THOMPSON), 

U.S. PAT. NO. 5,825,750 (THOMPSON) INVALIDATES THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (a) 
AND 102(e), pp.1-13, November 15, 2005. 






C17 


EXHIBIT A-15 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, FAULT DETECTION IN AN ETHERNET 
NETWORK VIA ANOMALY DETECTORS, FAULT DETECTION IN AN ETHERNET NETWORK VIA ANOMALY 

DETECTORS INVALIDATES THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (b), pp.1-9, November 15, 
2005. 
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C18 


EXHIBIT A-16 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, HARRIS CORPORATION, "STAKE OUT 
NETWORK SURVEILLANCE", STAKE OUT NETWORK SURVEILLANCE INVALIDATES THE INDICATED 

CLAIMS UNDER 35 U.S.C. § 102 (b), pp.1-12, November 15, 2005. 






C19 


EXHIBIT A-17 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 1 1 , HP OPENVIEW FOR WINDOWS USER 
GUIDE, "HP OPENVIEW", HP OPENVIEW AND THE INTERNET STANDARDS INVALIDATE THE INDICATED 

CLAIMS UNDER 35 U.S.C. § 102 (b) AND/OR 103, pp. 1-29, November 15, 2005. 






Hon 


FYHIRIT A-1ft TO TMF QVMANTFP CORPORATION'^ ^FPONIH IPPI FMFNTAI RF^PON^F^ TO ^Rl 

INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, INTERNETWORK SECURITY MONITOR, 
"ISM", ISM AND DIDS INVALIDATE THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (b) OR 103, pp. 1-80, 
November 15, 2005. 






C21 


EXHIBIT A-19 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, EMERALD 1997, INTRUSIVE ACTIVITY 1991, 
NIDES 1994, EMERALD 1997, INTRUSIVE ACTIVITY 1991, AND NIDES 1994 INVALIDATE THE INDICATED 

CLAIMS UNDER 35 U.S.C. § 102 (b) AND/OR 103, pp. 1-53, November 15, 2005. 






C22 


EXHIBIT A-20 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, NETSTALKER AND HP OPENVIEW, 

NETSTALKER AND HP OPENVIEW INVALIDATE THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (b) 
AND/OR 103, pp. 1-32, November 15, 2005. 






C23 


EXHIBIT A-21 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 1 1 .NETWORK FLIGHT RECORDER, NETWORK 

FLIGHT RECORDER INVALIDATES THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (b) AND/OR 103, pp. 
1-53, November 15, 2005. 






C24 


EXHIBIT A-22 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, AUTOMATED INFORMATION SYSTEM "AIS", 

AIS INVALIDATES THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (b), pp. 1-21, November 15, 2005. 






C25 


EXHIBIT A-23 TO THE SYMANTEC CORPORATION'S SECOND SUPPLEMENTAL RESPONSES TO SRI 
INTERNATIONAL, INC.'S INTERROGATORIES NOS. 6 AND 11, COMPARISON OF LISTED PUBLICATIONS 

TO CLAIMS -AT-ISSUE OF SRI'S PATENT-IN-SUIT FOR 35 U.S.C. § 103, pp. 1-57, November 15, 2005. 
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C26 


SUPPLEMENTAL RESPONSES AND OBJECTIONS OF ISS-GA AND ISS-DE TO SRI'S INTERROGATORY 
NOS 6 & 1 1, SRI International, Inc., a California Corporation v. Internet Security Systems Inc., a Delaware 
Corporation, Internet Security Systems, Inc., a Georgia Corporation, and Symantec Corporation, a Delaware 
Corporation, pp. 1-22, Certificate of Service dated November 15, 2005 






C27 


EXHIBIT 1 TO THE SUPPLEMENTAL RESPONSES AND OBJECTIONS OF ISS-GA AND ISS-DE TO SRI'S 
INTERROGATORY NOS 6 & 11, EMERALD 1997 INVALIDATES THE INDICATED CLAIMS UNDER 35 U.S.C. 

§ 102 (b), pp. 1-60, November 15, 2005. 






C28 


EXHIBIT 2 TO THE SUPPLEMENTAL RESPONSES AND OBJECTIONS OF ISS-GA AND ISS-DE TO SRI'S 
INTERROGATORY NOS 6 & 11, CMAD INVALIDATES THE INDICATED CLAIMS UNDER 35 U.S.C. § 102 (b) 
AND/OR 103,pp 1-27, November 15, 2005. 






C29 


EXHIBIT 3 TO THE SUPPLEMENTAL RESPONSES AND OBJECTIONS OF ISS-GA AND ISS-DE TO SRI'S 
INTERROGATORY NOS 6 & 1 1, EMERALD CONCEPTUAL OVERVIEW INVALIDATES THE INDICATED 

CLAIMS UNDER 35 U.S.C. § 102 (b) AND/OR 103, pp. 1-35, November 15, 2005. 






C30 


EXHIBIT 4 TO THE SUPPLEMENTAL RESPONSES AND OBJECTIONS OF ISS-GA AND ISS-DE TO SRI'S 
INTERROGATORY NOS 6 & 1 1, CONCEPTUAL DESIGN AND PLANNING FOR EMERALD: EVENT 
MONITORING ENABLING RESPONSES TO ANOMALOUS LIVE DISTURBANCES VERSION 1.2, 20 May 

19971 NVALIDATE THE INDICATED CLAIMS UNDER 35 U.S.C.§ 102 (b) AND/OR 103, pp. 1-58, November 15, 
2005. 






C31 


EXHIBIT 5 TO THE SUPPLEMENTAL RESPONSES AND OBJECTIONS OF ISS-GA AND ISS-DE TO SRI'S 
INTERROGATORY NOS 6 & 1 1, LIVE TRAFFIC ANALYSIS INVALIDATES THE INDICATED CLAIMS UNDER 

35 US.C.§ 102 (b), PP. 1-52, November 15, 2005. 






C32 


EXHIBIT 6 TO THE SUPPLEMENTAL RESPONSES AND OBJECTIONS OF ISS-GA AND ISS-DE TO SRI'S 
INTERROGATORY NOS 6 & 11, NEXT-GENERATION INTRUSION DETECTION EXPERT SYSTEM (NIDES): A 

SUMMARY INVALIDATES THE INDICATED CLAIMS UNDER 35 U.S.C.§ 102 (b), pp. 1-47, November 15, 2005 
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EXHIBIT 7 TO THE SUPPLEMENTAL RESPONSES AND OBJECTIONS OF ISS-GA AND ISS-DE TO SRI'S 
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